[Git][security-tracker-team/security-tracker][master] 3 commits: lts: triage php-nette

[Emilio Pozuelo Monfort (@pochu)]

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6752cf60 by Emilio Pozuelo Monfort at 2021-12-30T11:25:24+01:00
lts: triage php-nette

- - - - -
93b1d840 by Emilio Pozuelo Monfort at 2021-12-30T11:34:03+01:00
lts: triage pjproject

- - - - -
951c9f37 by Emilio Pozuelo Monfort at 2021-12-30T11:39:30+01:00
lts: triage epiphany

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -2818,18 +2818,22 @@ CVE-2021-45089 (Stormshield Endpoint Security 2.x before 2.1.2 has Incorrect Acc
 	NOT-FOR-US: Stormshield Endpoint Security
 CVE-2021-45088 (XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before  ...)
 	- epiphany-browser 41.2-1
+	[stretch] - epiphany-browser <ignored> (WebKit browser, not covered by security support in stretch)
 	NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/issues/1612
 	NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1045
 CVE-2021-45087 (XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before  ...)
 	- epiphany-browser 41.2-1
+	[stretch] - epiphany-browser <ignored> (WebKit browser, not covered by security support in stretch)
 	NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/issues/1612
 	NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1045
 CVE-2021-45086 (XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before  ...)
 	- epiphany-browser 41.2-1
+	[stretch] - epiphany-browser <ignored> (WebKit browser, not covered by security support in stretch)
 	NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/issues/1612
 	NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1045
 CVE-2021-45085 (XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before  ...)
 	- epiphany-browser 41.2-1
+	[stretch] - epiphany-browser <ignored> (WebKit browser, not covered by security support in stretch)
 	NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/issues/1612
 	NOTE: https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1045
 CVE-2021-45084


=====================================
data/dla-needed.txt
=====================================
@@ -85,6 +85,11 @@ nvidia-graphics-drivers (Markus Koschany)
 pgbouncer (Christoph Berg)
   NOTE: 20211220: maintainer might want to upload fixed version
 --
+php-nette
+--
+pjproject
+  NOTE: 20211230: patch available for the no-dsa issue, check its NOTE (pochu)
+--
 samba (Utkarsh Gupta)
   NOTE: 20211128: WIP https://salsa.debian.org/lts-team/packages/samba/
   NOTE: 20211212: Fix is too large, coordination with ELTS-upload



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/d13dafbb914e81b33ae171206626be42b250b546...951c9f37599275b6ea60ce8670d3e22f3a9c1ac8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/d13dafbb914e81b33ae171206626be42b250b546...951c9f37599275b6ea60ce8670d3e22f3a9c1ac8
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211230/dd25d860/attachment-0001.htm>